A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.
References
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: lenovo

Published: 2023-04-28T20:53:13.267Z

Updated: 2023-04-28T20:53:13.267Z

Reserved: 2023-03-30T12:46:45.646Z


Link: CVE-2023-29057

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2023-04-28T21:15:08.673

Modified: 2023-05-10T16:09:19.657


Link: CVE-2023-29057

JSON object: View

cve-icon Redhat Information

No data.